Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/efdc3ac8-cafe-3dec-8426-7c8a1eecbda5.roa
File:                     efdc3ac8-cafe-3dec-8426-7c8a1eecbda5.roa (raw, json)
Hash identifier:          /3BKvo8KvfpuQyW24FC7j1jmFXLY20GFeo0mH5AqVhI=
Subject key identifier:   23:DF:38:4E:C0:23:60:A5:DB:FB:45:FE:A8:AB:39:5C:81:F3:24:7E
Certificate issuer:       /CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263
Certificate serial:       010D0C9F4328584F4974D929E3CB2DB4263E7B00
Authority key identifier: CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/efdc3ac8-cafe-3dec-8426-7c8a1eecbda5.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396908
IP address blocks:        2602:f956:80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:d9:29:e3:cb:2d:b4:26:3e:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=3299c622-2fca-481d-affb-30f631a36107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:23:a9:cd:4f:8f:5d:21:e2:04:f8:f0:5b:93:
                    fc:10:ed:0a:2b:63:2d:59:4a:dd:13:bf:c5:b6:be:
                    cf:98:5d:86:bf:29:10:a8:a6:7f:7a:fc:06:17:5e:
                    4a:1d:70:04:0e:16:7d:f4:60:e7:d6:8b:ff:b6:d0:
                    25:80:99:b1:78:2a:12:87:9d:22:65:e6:c8:76:6c:
                    cc:02:73:c9:e4:64:8e:88:98:30:48:72:53:d6:73:
                    e4:97:7b:0d:79:25:71:6c:10:95:ec:8d:11:26:85:
                    c4:e3:fb:57:51:c6:4f:60:6a:e1:e4:48:61:ec:f8:
                    32:48:af:e4:af:85:2b:c1:52:c9:80:06:78:48:73:
                    e5:ec:ba:5d:0c:45:e2:d3:ff:b2:f7:33:7a:d4:d0:
                    d5:6c:b8:18:93:02:4f:84:9f:75:10:60:dc:29:6b:
                    aa:1e:08:49:d1:85:99:5c:59:82:cd:f1:cd:4d:69:
                    96:7d:ae:68:5d:88:33:9e:75:2c:d8:e2:18:31:07:
                    bf:64:5b:62:70:08:5c:40:0b:a7:1b:74:e5:32:42:
                    4e:ce:4e:fb:a1:50:d0:3b:db:cd:28:f0:05:b1:33:
                    ed:63:e4:64:22:79:84:81:e4:a0:7d:d7:f3:ee:f7:
                    8e:1d:78:bc:a9:f5:1a:6a:2e:3d:70:90:f2:a7:6a:
                    42:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:DF:38:4E:C0:23:60:A5:DB:FB:45:FE:A8:AB:39:5C:81:F3:24:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/efdc3ac8-cafe-3dec-8426-7c8a1eecbda5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.crl

            X509v3 Authority Key Identifier:
                keyid:CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f956:80::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:1e:dc:0d:be:e3:29:35:53:26:e6:e8:ff:10:df:35:23:81:
         43:b7:94:d6:0a:3d:57:1c:fc:94:59:66:bc:7a:3f:73:45:c5:
         6b:23:ad:15:be:7f:9e:44:13:92:e0:b9:1a:c3:2c:0a:6b:99:
         73:06:7f:66:96:1a:57:71:c9:90:27:26:78:5b:8a:d0:00:1a:
         ee:ce:79:11:57:d6:22:73:a5:94:53:bd:37:7d:12:48:2c:61:
         c9:36:82:fe:ba:f2:85:39:35:b3:99:32:21:28:cc:07:e8:b9:
         f5:be:68:70:c1:43:12:ce:6e:17:15:7a:3a:10:d2:50:e7:b3:
         65:b5:ea:6e:c1:90:96:e4:be:9c:60:0b:e7:2e:72:8a:fa:f6:
         42:62:89:bf:c0:38:20:ac:af:c4:35:a3:53:ea:e0:fb:69:c9:
         d7:91:7a:df:49:b9:29:d2:b5:59:7e:8f:de:78:14:85:fd:94:
         f0:53:7f:db:64:f7:b1:8e:c6:97:04:a7:1a:7c:5b:05:27:ac:
         44:e5:0d:b2:ea:d9:10:ef:ca:08:03:2f:f8:fb:d4:90:ec:4e:
         5b:4f:26:30:fc:aa:e1:d8:56:61:4c:37:db:f8:6f:25:31:28:
         4e:97:fe:39:60:ae:d8:25:61:e7:0e:e4:0a:39:db:f7:b5:48:
         56:76:93:0f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdNkp48sttCY+ewAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWIyYzI3Y2EtZmI3Yy00Y2FkLTlmOWItNGY3NTRmODY0
MjYzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MzI5OWM2MjItMmZjYS00ODFkLWFmZmItMzBmNjMxYTM2MTA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiOpzU+PXSHiBPjwW5P8EO0KK2MtWUrdE7/F
tr7PmF2GvykQqKZ/evwGF15KHXAEDhZ99GDn1ov/ttAlgJmxeCoSh50iZebIdmzM
AnPJ5GSOiJgwSHJT1nPkl3sNeSVxbBCV7I0RJoXE4/tXUcZPYGrh5Ehh7PgySK/k
r4UrwVLJgAZ4SHPl7LpdDEXi0/+y9zN61NDVbLgYkwJPhJ91EGDcKWuqHghJ0YWZ
XFmCzfHNTWmWfa5oXYgznnUs2OIYMQe/ZFticAhcQAunG3TlMkJOzk77oVDQO9vN
KPAFsTPtY+RkInmEgeSgfdfz7veOHXi8qfUaai49cJDyp2pCKwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCPfOE7AI2Cl2/tF/qirOVyB8yR+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjJj
MjdjYS1mYjdjLTRjYWQtOWY5Yi00Zjc1NGY4NjQyNjMvZWZkYzNhYzgtY2FmZS0z
ZGVjLTg0MjYtN2M4YTFlZWNiZGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWIyYzI3Y2EtZmI3Yy00Y2FkLTlm
OWItNGY3NTRmODY0MjYzL2ViMmMyN2NhLWZiN2MtNGNhZC05ZjliLTRmNzU0Zjg2
NDI2My5jcmwwHwYDVR0jBBgwFoAUz7laojwbIP8QynSPJVz1CYmivlEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjJjMjdjYS1mYjdjLTRjYWQtOWY5Yi00Zjc1
NGY4NjQyNjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5VgCA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEAe3A2+4yk1Uybm6P8Q3zUjgUO3lNYKPVcc/JRZZrx6P3NFxWsj
rRW+f55EE5LguRrDLAprmXMGf2aWGldxyZAnJnhbitAAGu7OeRFX1iJzpZRTvTd9
EkgsYck2gv668oU5NbOZMiEozAfoufW+aHDBQxLObhcVejoQ0lDns2W16m7BkJbk
vpxgC+cucor69kJiib/AOCCsr8Q1o1Pq4PtpydeRet9JuSnStVl+j954FIX9lPBT
f9tk97GOxpcEpxp8WwUnrETlDbLq2RDvyggDL/j71JDsTltPJjD8quHYVmFMN9v4
byUxKE6X/jlgrtglYecO5Ao52/e1SFZ2kw8=
-----END CERTIFICATE-----
Generated at Sun Oct 11 13:42:22 2026 by rpki-client